Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/C6D6D3C4C45311ECB32C1E2EC4F9AE02.roa
File: C6D6D3C4C45311ECB32C1E2EC4F9AE02.roa (raw, json)
Hash identifier: vwwircZabVWoR5AzD8MZ5+CL8UWBV9K76UfRCu5EEmY=
Subject key identifier: ED:F5:9A:BF:01:62:30:8E:9F:98:E8:F7:02:CC:53:8E:C8:A2:C3:C6
Certificate issuer: /CN=A91BDCF1/serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A
Certificate serial: 4C
Authority key identifier: C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/C6D6D3C4C45311ECB32C1E2EC4F9AE02.roa
Signing time: Mon 25 Apr 2022 04:54:24 +0000
ROA not before: Mon 25 Apr 2022 04:54:24 +0000
ROA not after: Fri 31 Mar 2023 00:00:00 +0000
asID: 132422
IP address blocks: 103.178.56.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76 (0x4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDCF1/serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A
Validity
Not Before: Apr 25 04:54:24 2022 GMT
Not After : Mar 31 00:00:00 2023 GMT
Subject: CN=62662980-7e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:65:65:4f:08:f3:aa:1e:ee:fa:f9:b8:cd:35:
d5:b4:00:9a:09:6b:1e:67:c6:14:14:80:92:35:e7:
43:b6:95:6a:a9:97:7b:cf:e7:74:8d:a2:70:1d:be:
23:c5:61:36:cf:3d:fc:a9:31:b2:c4:af:d5:c5:a5:
eb:34:39:ee:c9:ba:af:d8:16:39:e8:2b:7a:49:21:
01:f7:84:f9:41:23:dc:a6:a9:46:6c:73:f4:f9:1a:
0b:42:1b:01:4c:c5:c3:fe:bf:63:e4:49:83:ec:4d:
4b:34:36:eb:55:e7:c5:5d:03:51:f1:23:35:dc:0b:
eb:87:14:f0:25:9d:e6:31:e2:05:45:ae:a0:ae:0d:
de:45:82:3f:50:06:3d:d8:09:f3:aa:ea:0d:f6:5f:
a8:58:2f:7a:66:45:18:42:97:06:59:4d:22:91:76:
03:01:3d:5a:00:ad:03:54:1f:8f:04:da:ea:b6:d4:
6c:f1:9b:1a:5d:9c:81:e7:51:2a:4c:de:7e:3b:65:
4a:05:3b:23:0d:f6:73:d3:38:92:a2:63:d7:28:5d:
d1:33:a6:00:7c:44:ad:98:d9:0d:ab:19:eb:b8:dc:
93:7f:e4:15:e0:33:e2:45:51:2e:55:01:20:84:06:
bf:9e:f2:7d:8e:d9:86:c9:b1:e8:52:d9:aa:c8:38:
36:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F5:9A:BF:01:62:30:8E:9F:98:E8:F7:02:CC:53:8E:C8:A2:C3:C6
X509v3 Authority Key Identifier:
keyid:C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/C6D6D3C4C45311ECB32C1E2EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.178.56.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:29:6a:90:1b:89:d2:f2:b7:51:e7:62:66:b8:1c:ab:39:c5:
6d:f0:34:e0:0f:6b:b9:61:7d:83:42:93:23:31:bc:5f:a6:bf:
fd:21:85:b4:21:65:ed:7c:96:57:7d:74:86:31:2c:7a:7a:37:
1c:ee:cb:10:b3:a6:b0:7b:04:51:be:bd:a9:7c:26:13:6d:d9:
c2:91:0d:12:03:e5:a9:07:b6:81:57:5b:68:06:f0:c9:11:22:
b7:1d:48:99:c9:4f:58:62:8e:bc:1b:a3:62:99:70:f4:4b:d3:
b6:de:17:7a:84:13:00:dc:a1:c4:a6:bf:54:73:7a:4a:e0:5c:
2b:fd:51:e8:65:e9:d9:d8:ed:da:85:fd:c9:47:36:bb:55:e5:
05:95:b6:6e:3b:fa:ca:4c:26:79:70:b4:6b:c8:34:81:21:eb:
50:f9:8d:1e:d2:99:3c:96:12:82:85:d7:cd:be:8d:d3:29:ce:
d7:b8:61:63:39:ac:a5:71:e6:a4:0f:07:b4:f6:12:e5:cd:45:
d6:a3:ab:8b:19:fa:99:9f:08:38:c7:0c:9e:32:2a:c2:88:9e:
ff:63:92:f4:10:22:f6:d1:89:ef:82:18:e5:27:7f:4b:e4:ef:
f5:a4:62:8d:4a:6a:4b:93:55:d9:9e:6a:ef:1d:12:23:48:d3:
f7:e3:0c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:03 2023 by rpki-client on console-ams.rpki-client.org